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SUMMARY 

PURPOSE: (U //POUO) To forward to the Intelligence Oversight Board (IOB) of the 
President’s Foreign Intelligence Advisory Board, via the Assistant to the Secretary of Defense 
for Intelligence Oversight (ATSD(IO)), NSA’s quarterly report on its intelligence activities. 

BACKGROUND: (U/ /FOUO) Executive Order 12333 and Executive Order 12863 
require Intelligence Community agency heads and Intelligence Community General Counsels 
and Inspectors General, respectively, to report to the IOB on a quarterly basis concerning 
intelligence activities that they have reason to believe may be unlawful or contrary to Executive 
Order or Presidential Directive. The enclosed memorandum covers all reportable activities 
known to the Inspector General and General Counsel. Per PIOB letter of 6 August 1982, 
Agency heads are responsible for reporting separately any additional reportable activities 
known to them, unless the President has specifically instructed that the Board is not to be 
informed. The Director’s signature signifies that no other activities that require reporting are 
known to him. 
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NATIONAL SECURITY AGENCY 
CENTRAL SECURITY SERVICE 

FORT GEORGE G MEADE. MARYLAND 20755-6000 

4 December 2002 


MEMORANDUM FOR THE CHAIRMAN, INTELLIGENCE OVERSIGHT BOARD 

THRU: Assistant to the Secretary of Defense (Intelligence Oversight) 

SUBJECT: (U//FOU0) Report to the Intelligence Oversight Board on NSA 
Activities - INFORMATION MEMORANDUM 


(U//FOUOt Except as previously reported to you or the President, or 
otherwise stated in the enclosure, we have no reason to believe that any intelligence 
activities of the National Security Agency during the quarter ending 30 September 
2002 were unlawful or contrary to Executive Order or Presidential Directive, and 
thus required to be reported pursuant to Section 1.7.(d) of Executive Order 12333. 


(U//FOUO) The Inspector General and the General Counsel continue to 
exercise oversight of Agency activities by means of inspections, surveys, training, 
review of directives and guidelines, and advice and counsel. These activities and 
other data requested by the Board or members of the staff of the Assistant to the 
Secretary of Defense (Intelligence Oversight) Are described in the enclosure. 


IOEL F. BRENNER 

InsriectoaGeneral 


OBERTXDEITZ 

Genera LCounsel 


(U//F OUO) -1 concur in the report of the Inspector General and the General 

Counsel and hereby make it our combined report. 


TysuUu/V 

MICHAEL V. HAYDEN 
Lieutenant General, USAF 
Director, NSA/Chief, CSS 


Enel: 

a/s 


This Memorandum is Unclassified 
Upon Removal of Enclosure 
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1. (U) INSPECTOR GENERAL ACTIVITIES 


(b) (1) 

(b) (3)-P.L. 86-36 
(b)(3)-50 USC 3024(i) 


a . (C //Q Ff During this quarter, the Office of Inspector General (OIG) reviewed 
various intelligence activities of the National Security Agency/Central Security 
Service (NSA/CSS) to determine whether they were conducted in accordance with 
applicable statutes. Executive Orders, Attorney General procedures, and DoD and 
internal directives. With few exceptions, the issues presented were routine and 
indicated that the operating elements understand the restrictions on NSA/CSS 
activities. 


b.-(G//TKTThe OIG re ceived an email from the Inspector General,]_| 

in which he said that an unidenti fied employee who had 
attended a town meeting at | | a lleged that during the 

meeting, an NSA employee expressed concern that [ | may have been processing 
communications signals in violation of USSID-18. It was further alleged that a high 
ranking official of NSA, the SIGINT Director, was present and not only failed to stop 
or investigate the violations, but also encouraged a more liberal interpretation of 
USSID-18. The OIG inquiry into this matter determined that the allegations were 
not substantiated. Numerous interviews with persons present at the town meeting 
support the conclusion that no violation of USSID-18 was discussed, that the SIGINT 
Director was not present at the meeting, and that no person was encouraged to 
violate, or give a new and unauthorized interpretation to USSID-18. The OIG 
inquiry final report is attached as Enclosure A. (k)(3)-P.L. 86-36 


£ 




e OIG re ceived a request from the Inspector General, 

to conduct an inquiry into the allege d improper destruction 


of Intelligence Oversight (IO) quarterly report files at|_|to determine whether the 

records were destroyed in accordance with applicable laws and regulations. Our 
inquiry concluded that no laws or regulations were violated in the matter, and that 
current quarterly report records-keeping practices at | [ are consistent with those 
of other field sites. The OIG inquiry final report is attached as Enclosure B. 


2. (U) GENERAL COUNSEL ACTIVITIES 

a.-4C//GI)The OGC reviewed various intelligence activities of the NSA/CSS to 
determine whether they were conducted in accordance with applicable statutes, 
Executive Orders, Attorney General procedures, and DoD and internal directives. 
The OGC advised Agency elements on a number of questions, including the 
collection and dissemination of communications of or concerning U.S. persons; the 
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reporting of possible violations of federal criminal law contained in SIGINT product; 
the testing of electronic equipment; and the applicability of the FISA. With few 
exceptions, the issues presented were routine and indicated that the operating 
elements understand the restrictions on NSA/CSS activities. The OGC did not file 
any reports with the Intelligence Oversight Board during this quarter. 


3. (U) SIGINT ACTIVITIES 

a. Collection Against U.S. Persons 

(1) (U) Intentional 


(b) (1) 

(b)(3)-P.L. 86-36 
(b)(3)-18 USC 798 
(b) (3)-50 USC 3024 (i) 


(S//SI) During t his q uarter, the DIRNSA granted approval for consensual 
collecti on a gainst l I persons; DIRNSA-approved consensual collection 

against RJ.S. persons was routinely terminated this quarter. 


(5//SI) The Attor ney Gener al granted authority to collect the 

communications of|_|U.S. persons during this quarter. However, 

collection was suspended on one of the individuals due to his arrest in 

Jnd subsequent extradition to the United States where he is now in 


detention. 


(b)(3)-P.L. 86-36 


(2) (U) Unintentional 

(S//SI//NT) This quarter, unintentional retrieval strategie s using the 
| | raw traffic files 

resulted in| Incidents against U.S. persons. All incidents were reported to 
responsible oversight officials and corrective actions were taken. 

b. (U// FOUQ ) Dissemination of U.S. Identities 
(1) (U) Intentional 

- (£>//SI )~In accordance with section 7 of USSID 18, | l u.S. identities were 

disseminated. The following table shows the justification and the number of 
instances of dissemination: in the "Unmasked" column, the U.S. identity was 
revealed in a serialized end product; in the "User Requested" column, a U.S. 
identity was released to a user at the user's request. 


(b) (1) 

(b) (3)-P.L. 86-36 
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JUSTIFICATION 

7.2. c Necessary 

7.2. C.1 Foreign Official 

7.2. C.3 International narcotics 

7.2. C.4 Criminal activity 

7.2. C.7 U.S. Government Official 

TOTAL 


Unmasked User Requested TOTAL 


(2) (U) Unintentional isi- 

- (S//O f) During this quarter, QsiGINT products were canceled because they 
contained the identities of U.S. persons, organizations, or entities. 


(b)(1) 

(b) (3J-P.L. 86-36 


4. (U) OTHER ACTIVITIES 

(U) Integrees in Analysis and Production 


"During this quarter. 


| In all cases, these individuals wer e provided with USSID 18 training . 
)rganizations having integrees at NSA included! 


I In addition, a verbati m transcript on which a 
report was based was provided electronically to thej 


(b)(3)-P.L. 86-36 


(U) Assistance to Law Enforcement 

-(S //SI//NF) T he j 

J provided support to 
during the quarter. This support included 

(b) (1) 

(b) (3)-P.L. 86-36 
(b) (3)-18 USC 798 
(b)(3)-50 USC 3024(i) 
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(b) (1 , 

(b)(3 -P.L. 86-36 
(b) (3)-18 USC 798 
(b)(3 -50 USC 3024(i) 


- (TS//SI//N F) Inadvertent Retention of FISA-Derived Intercept 

(T3//3I//NF) While cleaning out old files, an alysts in a SID organization 
discovered several pieces of FIS A-derived l l intercept, dated between 

| | that had been inadvertently filed and retained. <*>) (i) 

The intercept was destroyed immediately. All division personnel who handle b (31 P ' L ' 8 ° 36 
FISA-derived intercept have been reminded of the FISA minimization 
procedures as outlined in USSID-18 and ha ve been co unseled on the proper 

procedures for handling and disseminating!_|intercept and the 

restrictions against retaining such intercept. Procedures for handling this 
material within the division have been streamlined to minimize the possibility 
that such an incident will reoccur. 


(U) Working Aids 

(U) No new working aids were developed during the quarter. 


(U) Databases 


_ (0/ /Sf ^Numerous branches in I_I 

Iconsisten t wj,t h , O GCg u .i d .a nceJ "1 

_ | to avoid USSID-18 violations. 

Only information that is essential to understanding the intelligence is included. 

_ Additionally, many Offices o f Primary Interest ! I 

in order to ensure that they are not collected 

agamst or named in product. 


(b) (1) 

(b)(3)-P.L. 86-36 
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NATIONAL SECURITY AGENCY 
CENTRAL SECURITY SERVICE 

FORT GEORGE G. MEADE. MARYLAND 207SS-6000 

(b) (3) - p. l. 86-36 23 October 2002 


MEMORANDUM FOR INSPECTOR GENERAL] 



"(b) (l) 

(b)(3)-P.L. 86-36 
(b) (3)-50 USC 3024 (i) 


SUBJECT: I nquiry Into Alleged USSID 18 Violation Disclosed During a Town Meeting 


at 


](S//TK > 


-( S//TK) T his memorandum responds to your email message to Joel Brenner, our 
Inspector General, dated 20 September 2002, retransmitting a m essage from your staff 
dated 9 September 2002, which we had not previously received . 


Attached to the message 


was a one-page “Summary of Alleged Violation of USSID 1S/E.O. 12333.” The 
Summary states in relevant pan: 


(b)(3)-P.L. 86-36 


Disclosure of the alleged violation 


meeting a 


<[ 


occurred during a town 


| while the Director, SIGINT/NSA 
served as guest speaker. During the town meeting, it was obser ved that 


an NSA e mployee assigned to the 


"[voiced concern that 

" ' ::r 


was processing 


communications signals tha^ |(b) 

| l and occasionally needed to exceed the two-hour maximum 

timeline allowed under USSID 18. Reportedly, the Director, SIGINT 
responded that USSID 18 authorizes two hours - or the time necessary to 
determine the nature and amount of foreign intelligence included in the 
communications. 


3J-P.L. 86-36 


The gist of the allegation is (1) that 


‘was processing communications” signals in 


violation of USSID 18 and (2) that a mgn-ranking official of NSA, the SIGINT Director, 
not only failed to stop or investigate the violations (your Summary mentions 
communications in the plural, thus suggesting more than one violation), but 4lso ^; 

“encouraged a more liberal interpretation of USSID 18.” 


P.L. 86-36 
(b)(3)-50 USC 3024(i) 


"(b) (3)-P.L. 86-36 


(S//TK H infer that this is the same issue you raised when Mr. B renner and 


our Inspections Chief, visited you 


them of an unspecified violation at |_[but provided no details. 


You then advised 


-(G//TK)"We have not been made privy to the identity of the person who witnessed 
these events or made this allegation. We have therefore not been able to interview your 
source of information, assuming it is not one of the persons mentioned in the Summary. 


-4&fi c FK£ 


that the “referenced meeting took place in 


[you sen t Mr. Brenner a further e mail message stating 


pay have knowledge of the facts.” Fortunately, 


email message stating 

j. wh o still works at tft6' (3) ~ P ' L ~ 86-36 


is now 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-50 USC 3024(i) 
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Kb)(1) 

fb)(3)-P.L. 86-36 
(b) (3)-50 USC 3024(i) 


employed here at NS AW, and[ 


]was available by secure telephone, and we were 


-L.,. 


able to interview both of them immediately. Let me share with you what they say about 
these allegations. 

86-36 I \ \ 

- (SZ/TK ^ T | told us: “First, I would like to state for the re cord m y outrage 

[her italics] at the suggestion that I witnessed a violation of USSID 18 at | | and did 
not report it. If I were witness to such a violation, then I certainly would not try to report 
such an infra ction indirectly via an informal question at a town meeting.” According to 
t he question she asked was directed to what would happen if the te rms of 
USSID 18 unduly proved constraining. She added that in her op inion, 1 ts in fact 
extremely ri gorous in its efforts to ensure that USSID 18 and the 
are upheld.” 


(5/fT- fQ 


said that her question to DIRNSA was ins pired, in pan, b 


comments made by N'SA Deputy Director, Mr. Willia m Black, during 


We view-ed a copy of the 


videotape of Mr. Black’s address during which he commented on the challenges of doing 
business in the world of new technology using documents and authorities written in an 
“analog world.” He stated, “If a policy is in your way, it is incumbent upon you to let us 
know what they are.” He could not reasonably be understood to have “encouraged a 
more liberal interpretation of USSID 18.” (b) (1) 

(b) (3)-P.L. 86-36 
-(' b") ( 3')"- 5 0 


86-36 

(not! 


4SZZT - K - ) 


is employed as I 


as your sou rce informed y ou). She stated that s he was prese nt at the town 


~US(j 


3024(i) 


me eting and 
us.' 


remem 


bers[ 




question essentially as[ 


Jrepresen 


Jold us that she has no knowledge of any USSID 18 violation by a 


employee. 


ed i itfl , 


IS//TKI I n i he i n t ere st o f co nducting a thorough investigation, we contacted 


Jwho was present at the meeting. She told us that th e 


Director, NS A was at the me eting, but that the NSA SIGINT Director, was not. 


did not remember! 


question. She added, however, that said she 


certainly would have remembered if someone at the meeting had disclosed a possible 
USSID 18 violation. . ::;:; "(b) ( 3 )-p.l. 86-36 


(SZ/TK ) We also contacted several 
meeting. Those who remembered^ 


^employees who had attended the 
"Tquestion recalled it as 


represented it to us. None of those persons took her comments as a disclosure of a 
USSID 18 violation. 


(U) We therefore find the allegation unsubstantiated. 

_4S//Tkr)-Our office takes such allegations very seriously. Indeed, we encourage 
and to some degree depend on volunteered information to supplement the information we 
develop through our own initiative, and we are grateful for your assistance in bringing 
this particular allegation to our attention, regardless of the fact that we find it 
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unsubstantiated. We share your deep concern that SIGINT activities must be conducted 
both efficiently and in strict conformity with the nation’s laws and Constitution; and 
further, that we must remain constantly vigilant in this area. Early in Mr. Brenner’s 
tenure, our Director, Lt. Gen. Michael V. Hayden, gave him the opportunity to make this 
point to the entire NSA workforce, using the Agency’s internal television network, and 
he did so on 22 July 2002 (httD://www.n.nsa/IG/briefings.html') . 

(U) Thank you again for bringing this matter to our attention. 


Senior Assistant Inspector General 
for 

Investigations 


(b) (3)-P.L. 86-36 
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NATIONAL SECURITY AGENCY 
CENTRAL SECURITY SERVICE 

FORT GEORGE G. MEADE. MARYLAND 207S5-6000 


23 October 2002 


MEMORANDUM FOR INSPECTOR GENERAL. 


SUBJECT: Inquiry Into the Destruction of Intelligence Oversight (10) Quarterly Report 
(QR) Files (U) - INFORMATION MEMORANDUM 


“(3//TK)-This memorandum responds to your request that the NS A/CSS Office of 
Inspector General (OIG) conduct a n inquiry into the destruction o f Intelligence Oversight 
(10) Quarterly Report (QR) Files at | ~| You recommended that 

the OIG conduct an inquiry to determine whether the records were destroyed in 
accordance with applicable laws and regulations, and to determine the circumstances 
surrounding the change in policy no longer requiring the retention of QR files and 
documentation. 

- (S//TK - ) -We conducted a thorough inquiry in the matter, including interviews of 
the current and former Intelligence Oversight (10) officers. Operations Chiefs and othe r 
individuals knowledgeable of the QR records retention policies and practices at | | 

We also queried the NSA Office of General Counsel regarding legal advice, if any, which 

may have been rendered to | | in the matter. Fi nally, w e conducted additional queries 

to determine if the practices currently employed at l I are consistent with those at other 

field sites. We concluded that that no laws or r egulatio ns were violated in the matter, and 

that the current QR records-keeping practices at j | are consistent with those of other 

fieldsites. ■ . (b)(3 )-p.l. 86-36 

_ (S//TK) The inquiry revealed that the IO officer at l I 

l unilaterally determined to purge the QR files of documents relating to the 
inadvertent collection of U.S. person communications that you had reviewed during the 
l loint Inspection. The IO officer stated that when he reviewed the files after 
the Inspection, he found miscellaneous documents going back “at least ten years” that 
related to inadvertent collections of U.S. person communications, even though the 
intercepts themselves were immediately destroyed upon recognition. 

_ (S//TK> The IO officer stated that he was not directed or advised by anyone from 

| or NSA Headquarters to destroy the documents; rather he made the decision based 
on his experience and knowledge of QR records-keeping practices and regulations. The 
IO officer’s statement is supported by witness testimony and other, evidence collected 
during our inquiry. The NS A Offic e of General Counsel had no record or recollection of 
advice to the IO officer or to | | in this matter. Nor do the IO officers we interviewed. 
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(5//TK } As you are aware, there are no requirements under Executive Order 
12333 and USSID 18 to retain documentation relating to inadvertent collections of U.S. 
person communications that have been destroyed upon recognition; nor do they exist 
under the NS A OIG Procedures for the E.O. 12333 Quarterly Reporting, or under the 
l intemal Executive Order 12333 Quarterly Reporting Procedures. 

- <S//TR) To the contrary, we found that the NSA Signals Intelligence Directorate 
Office of Compliance (SID OC) supported the 10 officer’s actions, after the fact, 
advising that when U.S. person communications are destroyed upon recognition, a record 
should not be created to document the incident. This advice is consistent with applicable 
law and policy. 

_ ■■'■■fib) (3)—P.L. 86-36 

(S//TK ) We contacted several field sites to determine the practices for 
maintaining QR files. All the sites reported that they maintained QRs electronically. A 
few also maintained hard copies of QRs and back up documentation of potential 
violations of E.O. 12333 and USSID 18 that were reported to the NSA Office of General 
Counsel and the NSA OIG. None of the sites retained documentation, either 
electronically or on paper, of inadvertent collection of U.S. person communications when 
the int ercepts were destroyed. Accordingly, we find the current practice followed at 
| to be consistent with the practice followed at other field sites. 


-{S//TKTDuring the Joint IG Reinspection at | | in September 2002, team 

members reviewed the 10 QR files, both hard copy and electronic. They found that the 
files contained copies of the QRs and back-up documentation relating to reportable 
violations f rom 19 97. Based on our inquiry, we consider the current records retention 
practices at to be in accordance with applicable law and NSA regulations. 


( ■ 5//TK)T hank you for bringing this matter to o ur attention. If you have any 


questions, please contact me or 


at 963-0921 (S). 


(b)(3)-P.L. 86-36 


Senior Assistant Inspector General 
for 


Investigations 
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